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V. 

Dmitry Skjjprov 



1 U,S.O»Sli. 
CRifkMl COMPLAINT 

CASE NUMBER: : fc 

5 01 25ft* 



(Name and Address of Defendant) 
I. the undersigned complainant being duly sworn state the following is true and correct to the best of my 

knowledge end belief- On or about June 26,2001 in Santa Clara _ county.lnt 

Northern Dam* of California defendants did, rnadtSWutayLanHw^ftQfO»»w» 

iasnrt offer to the public, provide, and otherwise traffic in a soffiwere prod^ 
under (his title to 8 work or a portion thereof, and aid and abet such conduct 



in violation of Title 17 United States Coda, Section^) 12PHM1XA] and 18 U,S,C Sec. 2_ 



. *.„k-, stete m ■ om „ rt Special Agent F.B.I. and that this complaint is based on the following 



facts: 

t attached affidavit 



Penalties: 



5 _ .n^onmen. gEAlED EY 9 WKR 

■ ricw=COUHT 



JSOO.OOOfira nCW = [*L'U 

3 years of supervised retaase \IV s » >■*- ^ 

$100 penalty assessment t 

Bail requested: nObaH 

Continued on the attached sheet and made a part hereof: ^ Yes D * 




Sworn to before me and subscribed In my presence. 



.rniu-n...ir-iii i r ^tM J. O-Conw* 



Jfr / ^a aaL 



at 



San Jose, California 
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NORTHERN DISTRICT OF CALIFORNIA 
COUNTY OF SANTA CLARA 



) SS: AFFlDAVn FOR COMPLAINT 



Daniel J. O'Cunncll, being duly s* " 1 - deposes and states; 

Introduction 

, I submit this affidavit in support of a cnminal complaint and an arrest warrant for Dmitry 

Sklya.o^for violation of Title !7, Uuued States Code, Section! 201 (b^K^-rcumvcnUon of 

copynght protections, and Title 18, United States Code, Section 2 - aiding and abetting. 

2. Title 1 7, United States Code, Section 1201(b) states in relevant part: 

(l)Nope^nsball manufacture^ 

or otherwise traffic m any technology, product, service, device, 

component, or part thereof, that- 

tA\ .s nrimatiW designed or produced for the purpose of 
circimv^Sp^^n^oTdcd by a technological measure that 
erSuvXp^Slright of a copynght owner under this trtle in a 
work or a portion thereof; 



(2) As used in this subsection - 

(A) to "circumvent protection afforded by a technological £«*££" 
meWi avoiding, bypassing, removing, deactivating, or otherwise 
impairing a technological measure. 

Title 17, United States Code, Section 1204, states in relevant part: 

U) In general. - Any person who violates section 1201 or 1202 
willfully and for purposes of commercial advantage or private 
financial gain, 

( n shall be fined not more than $500,000 or imprisoned for not 
mire than 5 yean or both, for the first offense; and 

(21 shall be fined not more than $1,000,000 or imprisoned for not 
more than 1 years, or both, for any subsequent offense. 



BacKgmund nf Affiant 

4. 1 have been employed as a Special Agent for the Federal Bureau of Investigation for over 

rwenty-fivey^ars,lamcurrenUy assigned to the High Teim Squad at San Jo^CaU^ornia,wWch has 
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responsibility for tlie theft of intellectual property, theft of trade secrets, and violations of U.S 
copyright laws. I have participated in such intellectual property related investigations since passage 
of the Economic Espionage Act of 1996. 
ftasis for Charges 



5. On June 26. 2001, I met with representatives of Adobe Systems, Incorporated (Adobe), 

located in San Jose, California. Kevin Nathanson, Group Products Manager, eBoOks, Adobe, told 

me the following: 

a. Adobe produces computer software, including a software product named Adobe eBook 

Reader. 

b. eBookReaderworks as follows: afterusersuploadmeprogramontomeirpersonal computer 

systems, the users can contact a Internet Web based electronic bookseller such as Amazon.com or 
Barnes and Noble.com and purchase a book titles in an electronic format known as an oBook. As 
a result of a series of seamless transactions takingplace between the electronic bookseller, an Adobe 
Server, and the customer's computer, users may only open and view the encrypted eBook on the 
specific computer that the user utilized to engage in the transaction. Because the process is taking 
place outside the view or control of the user, the user never sees the verification/decryption process 
taking place between the eBook file and the Adobe eBook Reader. Nevertheless, because the book 
sold in encrypted form and only accessible through the eBook Reader and is not duplicatable, the 
copyright holder's interest in the book is protected. 

c. AdobeisbeingvietimLzedbyaRus$ianeomp^ 
a key over the Internet in the form of a software program that illegally unlocks copyright protections 
on the e-Book files. This unlocking key is available for purchase on the Internet at 
hnp:/Avww.elcomsoft.com/aebpr.htrnl. The commercial name given by Elcomsoft to this unlocking 
key program is Advanced eBook Processor (AEBPR). 

6. Nathanson arid Daiyl Spano, technical Investigator, Investigations /Anti-Piracy, Adobe, 

showed me Elcomsoft literature they observed on the Internet which describes a progiaul to decrypt 
eBooks in Adobe Acrobat eBook Reader format (PDF files with EBX security handler) as well as 
Adobe Acrobat PDF files protected using a standard security method, WebBuy Technology, or any 
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other Acrobat security plug-in (like FileOpen, SoftLock etc.). The decrypted file can be opened in 
any PDF viewer (c.g. Adobe Acrobat Reader) without any restrictions- i.e. with edit, copy print, 
annotate functions enabled. All versionsof Adobe Acrobat are supported. It also can decrypt e-Book 
Pro (*.EBK) files, extracting all htm! pages and images from them. 

7. Nathanson told me that the real damage done by the AEBPR program is that it creates a 
"naked file" that enables anyone to read the eBook on any computer without paying the fee to the 
bookseller. Only one legitimate copy of the encrypted eBook needs be purchased originally and after 
the protections are stripped through usage of the Elcomsoft program, there are no restrictions and 
the eBook can be duplicated freely and made available for usage on any computer. 

8. Daryl Spano told me the following: 

a. Adobe purchased acopy of the Elcomsoft unlocking software over the Internet, and an Adobe 
engineer told Spano that the unlocking key worked as Elcomsoft claimed. 

b Adobe purchased theprogram from Elcomsoft through a U.S. based company that Elcomsoft 
was using as a means of collecting a $99 fee for purchase and usage of the unlocking key. Nathanson 
and Spano told me that this company was Register Now! (www.regnow.com) Dept # 1 170-75, PO 
Box 1816 Issaquah, Washington 98027, 1 -877-353-7297. Register Now! collected the $99 fee that 
pays for the unlocking key. Thereafter, Elcomsoft, after receiving verification from Register Now!, 
electronically sent the unlocking key registration code from Elcomsoft to the purchaser (Adobe) in 
San Jose, California, in the Northern District of California. Spano provided documents to me 
reflecting the transaction and showing that the unlocking key was purchased by Adobe on June 26, 

2001. 

c. The Elcomsoft unlocking software was downloaded for free directly from the Elcomsoft site 
without purchasing the key. However, the software obtained without the unlocking key allowed one 
to view only approximately ten percent of an eBook in the Adobe formal. In order to get the 
complete book, the person downloading the Elcomsoft software was required to pay Elcomsoft the 
$99 fee through the RegNow website to obtain the unlocking key. 

d. A review of the opening screen on the Elcomsoft software purchased showed that a person 
named Dmitry Sklyarov is identified as being the copyright holder of the Elcomsoft program. Spano 
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exhibited this opening screen to me and provided me with a copy of the screen. Spano also provided 
me a copy of the E-mail from Elcomsoft managing director Vladimir Kalalov furnishing the 
unlocking key after ihc fee had been paid to Elcomsoft through the RegNow website. 

e. Adobe has learned that Dmitry Sklyarov is slated to speak on July 1 5, 200 1 at 3 conference 
entitled Defcon-9 at Us Vegas Nevada. Spano told me that he learned that Sklyarov is scheduled 
to make a presentation related to the AEBPR software program. 

9. Nathanson told me that thus far, Elcomsoft has defeated Adobe's Version 2. 1 eBook Reader 
and has threatened in literature on its website to issue a "crack" for Acrobat eBook Reader Version 
2.2 that has just been released. 

10. Nathanson and Spano stated that Adobe has attempted to prevent Elcomsoft from providing 
the unlocking key to (he public and has been resisted in this effort by Elcomsoft. Adobe has sent 
"cease and desist" letters to Elcomsoft, RegNow and the Internet Service Provider for Elcomsoft, 

Verio Inc. 

Independent Investigation 

11. On July 2, 2001 , 1 viewed the Internet home page of RegNow, "www.regnow.com". The 
following products were listed for purchase through the w*site; 

Advanced PDF Password Recovery (Pro) 

Recover passwords lo Adobe Acrobat PDF files 
1 • ElcomSoft Co. Ltd- 

Advanced PDF Password Recovery 

Decrypt protected Adobe Acrobat PDF files. 

ElcomSoft Co. Ltd. 

Advanced eBook Processor (Discount) 

Decrypt protected Adobe Acrobat PDF files and eBooks 

ElcomSoft Co. Ltd. 
When I used a computer mouse to select the above listed programs for purchase through the RegNow 
website, I was directed to the home page ofElcomsoft.com. 
12. On July 2 and 3, 2001, 1 observed the following information on the ELCOMSOFT website 
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in which Elcomsoft describes its business activity. 



"ElcomSoft Co.Lto\ is a privately owned software development 
company headquartered in Moscow, Russia. Established m 
l990,Elcom specializes in producing Windows productivity and 
utility applications for businesses and individuals. ElcomSoft 
Co Ud is a member of the Russian Cryptology Association 
(RCA) and a lifetime member of the Association of Shareware 
Professionals (ASP). ElcomSoft is also a Microsoft Independent 
Software Vendor (ISV) partner..." 

13. iobscTwdttattfieiacom»ftw^ 

a listing of new products and their release dates: 

"June 26, 2001 New versions of Advanced eBook Processor and 
Advanced NT Security Explorer now available" and "June 20, 
2O01 New producthas been released: Advanced eBook Processor. 
Decrypt eBooks for Adobe Acrobat eBook Reader and PDFs 
protected with all security plug-ins, including WebBuy! 

1 4. I observed that Elcomsoft described its product and madecertain comments about its legality 

as follows: 

Advanced eBook Processor .... 

06720*2001 We have released our new program and called it AEBPR 
(Advanced eBook Processor). The only thing the program does is: 
converting documents from Acrobat eBook format (compiled tor 
Adobe Acrobat eBook Reader) to the plain Acrobat format (PDb). 
Again that? s all: from one Adobe format to another. But PDF is much 
widerused, because there are (free) PDF viewers for a lot ofhardware 
platforms (from workstations to PDAs) and operating systems 
(Windows, Mac, Linux etc), while Acrobat eBook Readerisavaalable 
for Windows and Mac only. 

" This program works only with eBooks you IcgaUy o vm, i ; e. purchased 
from one of online stores like Amazon or Barnes & Noble. So we 
were absolutely sure that the owner of eBook has all rights to read the 
book he purchased where he wants and how he wants. 

The demo version of AEBPR allows to convert only first 10% of tie 
book content. To protect unauthorized distribution of eB ooks on the 
piracy market, we have set (he "border" price for this program - $99, 
which is much more than an average eBook cost (most eBooks are 
being sold from $10 to $30 T and there are a lot free ones). 

You can download a demo version of AEBPR here, here or here 
(please note that current release of our program does not support the 
latest version of Adobe eBook Reader, 2.2; that is the result of 
unpredieted Adobe reaction to our release of this program - see 
below). 

06725/2001 We have received a notification from Adobe Anti-Piracy 
Affidavit in Support of Criminal Complaint 5 
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Enforcement Lcaiu in which Ihcy claimed that our program is illegal 
and we need to remove it immediately from our site. They said they 



2 give us 5 days otherwise they will "pursue us aggressively". 
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0672672001 We have received an E-mail from our ISP, Verio Inc 
They wrote that Adobe has contacted them to shut down our Web site 
(again, immediately). As Adobe wrote to Verio, the reason was: the 
site "offers downloads to their copyrighted software published by 
Adobe Systems." Obviously - this is not true, we never distributed 
any software copyrighted by Adobe Systems. Sut as you can see, 
Adobe is not even going to collect the correct information (what laws, 
copyrights and terms-of-use have been violated), but just started their 
aggressive actions before 5-day period (they set themselves) has 
expired. Really, they did not want to give us a rime to consult with 
our attorneys I Verio gave us 6 hours to remove this page (the one you 
are reading now). So we moved the site to another ISP... 

06/27/2001 (2:19:30 PM) Verio has contacted us again, this time not 
asking for something, but just with a notification! "Host blocked: 
www dcomsoft.com7aebpr.html- 198.63.210.56 port 80(www) You 
can see, that since they were not able to close our web site 
completely, they simply disabled access to n on then routers. 
Moreover, they have blocked the whole IP address of our server, so 
not only this site, but also lots of other (not only ours) web sites 
became completely out of reach! But we already had a few mirrors 
ready, and after this unfriendly action from Verio, we have updated 
appropriate DNS rccwids- In 6 hours, our web site was accessible 
again! 

06728/2001 (10:57 AM) Adobe has sent acomplaint to RegNow our 
billing service (5 days are still not expired!). This time they called it 
"unauthorized distribution of software".-. 

RegNow asked us for advice what they should do in this situation. 
We didnt want them to be involved in our problems, and so asked to 
stop sales of AEBPR.... 

07/03/2001 Now it's time for the brutal truth on Adobe eBOok 
" protection. We claim that ANY eBook protection, based on Acrobat 
PDF format (as Adobe eBook Reader is), is ABSOLUTELY insecure 
i ust due to the nature of this format and encryption system developed 
by Adobe. The general rule is: if one can open particular PDF file or 
eBook on his computer (does not matter with what kind of 
permissions/restrictions), he can remove Lhat protection (by 
converting that file into "plain", unprotected PDF. Not very much 
experience needed. In brief: ANY security plugin (actually, eBooks 
are protected with security plug-in as well: EBX) does nothing but 
returns a decryption key to Adobe Acrobat Reader or Adobe Acrobat 
eBook Reader. Plug-in can make various hardware verifications, use 
parallel port dongles, connect to the publisher's web site and use 
asymmetric encryption, etc, but all ends up with a decryption key, 
because the Reader needs it to open the files. And when the key is 
there, we can use it to decrypt the document removing all 
permissions. 

Below is the list (not complete) or Acrobat-based protections 
Affidavit in Support of Criminal Complaint 6 
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supported by Advanced eBook Processor: 

* "standard" PDF encryption, 

* BF"1 H Rot 1 3 (used by New Paradigm Resources Uroup, inc. j, 

* FileOpen (by FileOpen Systems), 

* SoftLock (by SoftLock Services, Inc.), 

* Internet Standards Australia 

* Adobe's Web Buy 

* Adobe's eBook Reader (GlassBook Readei) 

We claim that by aggressively pushing of standards, unapproved by 
professional cryptologtsts, to the fast growing electronic books 
market and with pursuing of independent fsearchere who tries ta 
highlight the problems, Adobe Systems violates the rights of books 
authore and publishers, which may result the unauthorized 
distribution of their books in the Internet..,. " 

15. On July 2, 2001 , 1 reviewed the website for the -Defcon-9" convention scheduled for July 
13-15, 2001, in Las Vegas Nevada. I observed that an individual identified as Dmitry Sklyarov and 
an individual identified as And> Malyshev are listed as speakers who are to discuss the Acrobat e- 

Book reader. 

16. The website of the Defcon-9 conference described it as follows: 

anaimiialeoiiroiiterundeigroundpartyforhackeis 
Nevada. It has been held every summer forthc past eight years. Oyer 
those vears it has grown in size, and attracted people torn all oyer the 
planet People attend to meet others into hadring, hang out with old 
friends. listen to new speeches or just hack on me network That s 
what it is all about in a nutshell. Meeting other people and learning 
something new. Last year over4,200 people showedup. That makes 
us (Currently) the Largest hacking convention on the planet. 



17. The-Defcon-9 website described Dmiby Sklyarov's speech topic as follows: 

Dmitry Sklyarov 

Andy Malyshev 

eBooks security - theory and practice 

Security aspects of electronic books and documents, and a 

demonstration of how weak they are: "standard" PDF encryption 

Rotl3(usedbyNew Paradigm Resources Group, Inc), biieupen 

(by FileOpen Systems), SoftLock (by ScftLwk Services, &jO, 

Adobe's Web Buy, Adobe's eBook Reader (GlassBook Reader) 

lnterTmst DocBox plug-in. 

Documents publishing in electronic form have a lot of advantages 
against traditional on-paper publishing. You could easily find Ustof 
such advantages on web server of any company, which provides 
eBook solutions. But nobody perfects, and there is one big P™Jem 
that related with eBooks. Information in electronic form could be 
duplicated and transmitted, and there is no reliable way to take 
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control over that processes. There arc several solutions from different 
companies that were developed to prevent unauthorized distribution 
of the electronic documents. 

1 8. The Defcon 9 website also included the following statement from "Dmitry Sklyarov:" 

My name is Dmitry Sklyarov, rm employee of the ElcomSoft 
Company As we have demonstrated in our speech on Black Hat 
Win2JC Security (February 2001), encryption in Microsoft Office 
documents is very weak and password protection may he removed 
without any problems in most cases. In this speech I'll try to cover 
password protection aspects of electronic books and documents. The 
most attention will be paid to documents in PDF format.. 

19. On July 5, 2001 , 1 spoke via telephone with Tom Diaz, Senior Engineering Manager for the 
eBook Development Group of Adobe. In response to my question, Diaz affirmed that he believes 
the Elcomsoft software program, coupled with the Elcomsoft unlockingkey, circumvents protection 
afforded by a technological measure developed by Adobe for its Acrobat cBook Reader either by 
avoiding, bypassing, removing, deactivating, or otherwise impairing the technological measure. 

Conclusion 

20. Based onthe foregoing, IbelicveDmitiySklyarov, employee of Elcomsoft and theindividual 
ltfted on the Elcomsoft software products as the copyright holder to the program sold and produced 
by Elcomsoft, known as the Advanced cBook Processor, has willfully and for financial gain 
imported, offered to the public, provided, and otherwise trafficked in a technology, product, service, 
and device that is primarily designed or produced for the purpose of circumvention a technological 
measure that effectively controls access to a work protected under Title 1 7, namely books distributed 
in a form readable by me Adobe eBook Reader, in violation of Title 17, United States Code, Section 
1201(b)(1)(A) and Title 18, United States Code, Section 2. 

^O^^uJL Cl 0' JLJa. 

tenicl J. O'ConncJK 



Daniel 

Special Agent 

Federal bureau oflnvestigation 



Swom and subscribed before me 
this f Q day of July, 2001 




i Magistrate Judge 
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